Loading...
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * Handle extern requests for shutdown, reboot and sysrq
4 */
5
6#define pr_fmt(fmt) "xen:" KBUILD_MODNAME ": " fmt
7
8#include <linux/kernel.h>
9#include <linux/err.h>
10#include <linux/slab.h>
11#include <linux/reboot.h>
12#include <linux/sysrq.h>
13#include <linux/stop_machine.h>
14#include <linux/freezer.h>
15#include <linux/syscore_ops.h>
16#include <linux/export.h>
17
18#include <xen/xen.h>
19#include <xen/xenbus.h>
20#include <xen/grant_table.h>
21#include <xen/events.h>
22#include <xen/hvc-console.h>
23#include <xen/page.h>
24#include <xen/xen-ops.h>
25
26#include <asm/xen/hypercall.h>
27#include <asm/xen/hypervisor.h>
28
29enum shutdown_state {
30 SHUTDOWN_INVALID = -1,
31 SHUTDOWN_POWEROFF = 0,
32 SHUTDOWN_SUSPEND = 2,
33 /* Code 3 is SHUTDOWN_CRASH, which we don't use because the domain can only
34 report a crash, not be instructed to crash!
35 HALT is the same as POWEROFF, as far as we're concerned. The tools use
36 the distinction when we return the reason code to them. */
37 SHUTDOWN_HALT = 4,
38};
39
40/* Ignore multiple shutdown requests. */
41static enum shutdown_state shutting_down = SHUTDOWN_INVALID;
42
43struct suspend_info {
44 int cancelled;
45};
46
47static RAW_NOTIFIER_HEAD(xen_resume_notifier);
48
49void xen_resume_notifier_register(struct notifier_block *nb)
50{
51 raw_notifier_chain_register(&xen_resume_notifier, nb);
52}
53EXPORT_SYMBOL_GPL(xen_resume_notifier_register);
54
55void xen_resume_notifier_unregister(struct notifier_block *nb)
56{
57 raw_notifier_chain_unregister(&xen_resume_notifier, nb);
58}
59EXPORT_SYMBOL_GPL(xen_resume_notifier_unregister);
60
61#ifdef CONFIG_HIBERNATE_CALLBACKS
62static int xen_suspend(void *data)
63{
64 struct suspend_info *si = data;
65 int err;
66
67 BUG_ON(!irqs_disabled());
68
69 err = syscore_suspend();
70 if (err) {
71 pr_err("%s: system core suspend failed: %d\n", __func__, err);
72 return err;
73 }
74
75 gnttab_suspend();
76 xen_manage_runstate_time(-1);
77 xen_arch_pre_suspend();
78
79 si->cancelled = HYPERVISOR_suspend(xen_pv_domain()
80 ? virt_to_gfn(xen_start_info)
81 : 0);
82
83 xen_arch_post_suspend(si->cancelled);
84 xen_manage_runstate_time(si->cancelled ? 1 : 0);
85 gnttab_resume();
86
87 if (!si->cancelled) {
88 xen_irq_resume();
89 xen_timer_resume();
90 }
91
92 syscore_resume();
93
94 return 0;
95}
96
97static void do_suspend(void)
98{
99 int err;
100 struct suspend_info si;
101
102 shutting_down = SHUTDOWN_SUSPEND;
103
104 err = freeze_processes();
105 if (err) {
106 pr_err("%s: freeze processes failed %d\n", __func__, err);
107 goto out;
108 }
109
110 err = freeze_kernel_threads();
111 if (err) {
112 pr_err("%s: freeze kernel threads failed %d\n", __func__, err);
113 goto out_thaw;
114 }
115
116 err = dpm_suspend_start(PMSG_FREEZE);
117 if (err) {
118 pr_err("%s: dpm_suspend_start %d\n", __func__, err);
119 goto out_thaw;
120 }
121
122 printk(KERN_DEBUG "suspending xenstore...\n");
123 xs_suspend();
124
125 err = dpm_suspend_end(PMSG_FREEZE);
126 if (err) {
127 pr_err("dpm_suspend_end failed: %d\n", err);
128 si.cancelled = 0;
129 goto out_resume;
130 }
131
132 xen_arch_suspend();
133
134 si.cancelled = 1;
135
136 err = stop_machine(xen_suspend, &si, cpumask_of(0));
137
138 /* Resume console as early as possible. */
139 if (!si.cancelled)
140 xen_console_resume();
141
142 raw_notifier_call_chain(&xen_resume_notifier, 0, NULL);
143
144 xen_arch_resume();
145
146 dpm_resume_start(si.cancelled ? PMSG_THAW : PMSG_RESTORE);
147
148 if (err) {
149 pr_err("failed to start xen_suspend: %d\n", err);
150 si.cancelled = 1;
151 }
152
153out_resume:
154 if (!si.cancelled)
155 xs_resume();
156 else
157 xs_suspend_cancel();
158
159 dpm_resume_end(si.cancelled ? PMSG_THAW : PMSG_RESTORE);
160
161out_thaw:
162 thaw_processes();
163out:
164 shutting_down = SHUTDOWN_INVALID;
165}
166#endif /* CONFIG_HIBERNATE_CALLBACKS */
167
168struct shutdown_handler {
169#define SHUTDOWN_CMD_SIZE 11
170 const char command[SHUTDOWN_CMD_SIZE];
171 bool flag;
172 void (*cb)(void);
173};
174
175static int poweroff_nb(struct notifier_block *cb, unsigned long code, void *unused)
176{
177 switch (code) {
178 case SYS_DOWN:
179 case SYS_HALT:
180 case SYS_POWER_OFF:
181 shutting_down = SHUTDOWN_POWEROFF;
182 break;
183 default:
184 break;
185 }
186 return NOTIFY_DONE;
187}
188static void do_poweroff(void)
189{
190 switch (system_state) {
191 case SYSTEM_BOOTING:
192 case SYSTEM_SCHEDULING:
193 orderly_poweroff(true);
194 break;
195 case SYSTEM_RUNNING:
196 orderly_poweroff(false);
197 break;
198 default:
199 /* Don't do it when we are halting/rebooting. */
200 pr_info("Ignoring Xen toolstack shutdown.\n");
201 break;
202 }
203}
204
205static void do_reboot(void)
206{
207 shutting_down = SHUTDOWN_POWEROFF; /* ? */
208 orderly_reboot();
209}
210
211static const struct shutdown_handler shutdown_handlers[] = {
212 { "poweroff", true, do_poweroff },
213 { "halt", false, do_poweroff },
214 { "reboot", true, do_reboot },
215#ifdef CONFIG_HIBERNATE_CALLBACKS
216 { "suspend", true, do_suspend },
217#endif
218};
219
220static void shutdown_handler(struct xenbus_watch *watch,
221 const char *path, const char *token)
222{
223 char *str;
224 struct xenbus_transaction xbt;
225 int err;
226 int idx;
227
228 if (shutting_down != SHUTDOWN_INVALID)
229 return;
230
231 again:
232 err = xenbus_transaction_start(&xbt);
233 if (err)
234 return;
235
236 str = (char *)xenbus_read(xbt, "control", "shutdown", NULL);
237 /* Ignore read errors and empty reads. */
238 if (XENBUS_IS_ERR_READ(str)) {
239 xenbus_transaction_end(xbt, 1);
240 return;
241 }
242
243 for (idx = 0; idx < ARRAY_SIZE(shutdown_handlers); idx++) {
244 if (strcmp(str, shutdown_handlers[idx].command) == 0)
245 break;
246 }
247
248 /* Only acknowledge commands which we are prepared to handle. */
249 if (idx < ARRAY_SIZE(shutdown_handlers))
250 xenbus_write(xbt, "control", "shutdown", "");
251
252 err = xenbus_transaction_end(xbt, 0);
253 if (err == -EAGAIN) {
254 kfree(str);
255 goto again;
256 }
257
258 if (idx < ARRAY_SIZE(shutdown_handlers)) {
259 shutdown_handlers[idx].cb();
260 } else {
261 pr_info("Ignoring shutdown request: %s\n", str);
262 shutting_down = SHUTDOWN_INVALID;
263 }
264
265 kfree(str);
266}
267
268#ifdef CONFIG_MAGIC_SYSRQ
269static void sysrq_handler(struct xenbus_watch *watch, const char *path,
270 const char *token)
271{
272 char sysrq_key = '\0';
273 struct xenbus_transaction xbt;
274 int err;
275
276 again:
277 err = xenbus_transaction_start(&xbt);
278 if (err)
279 return;
280 err = xenbus_scanf(xbt, "control", "sysrq", "%c", &sysrq_key);
281 if (err < 0) {
282 /*
283 * The Xenstore watch fires directly after registering it and
284 * after a suspend/resume cycle. So ENOENT is no error but
285 * might happen in those cases. ERANGE is observed when we get
286 * an empty value (''), this happens when we acknowledge the
287 * request by writing '\0' below.
288 */
289 if (err != -ENOENT && err != -ERANGE)
290 pr_err("Error %d reading sysrq code in control/sysrq\n",
291 err);
292 xenbus_transaction_end(xbt, 1);
293 return;
294 }
295
296 if (sysrq_key != '\0') {
297 err = xenbus_printf(xbt, "control", "sysrq", "%c", '\0');
298 if (err) {
299 pr_err("%s: Error %d writing sysrq in control/sysrq\n",
300 __func__, err);
301 xenbus_transaction_end(xbt, 1);
302 return;
303 }
304 }
305
306 err = xenbus_transaction_end(xbt, 0);
307 if (err == -EAGAIN)
308 goto again;
309
310 if (sysrq_key != '\0')
311 handle_sysrq(sysrq_key);
312}
313
314static struct xenbus_watch sysrq_watch = {
315 .node = "control/sysrq",
316 .callback = sysrq_handler
317};
318#endif
319
320static struct xenbus_watch shutdown_watch = {
321 .node = "control/shutdown",
322 .callback = shutdown_handler
323};
324
325static struct notifier_block xen_reboot_nb = {
326 .notifier_call = poweroff_nb,
327};
328
329static int setup_shutdown_watcher(void)
330{
331 int err;
332 int idx;
333#define FEATURE_PATH_SIZE (SHUTDOWN_CMD_SIZE + sizeof("feature-"))
334 char node[FEATURE_PATH_SIZE];
335
336 err = register_xenbus_watch(&shutdown_watch);
337 if (err) {
338 pr_err("Failed to set shutdown watcher\n");
339 return err;
340 }
341
342
343#ifdef CONFIG_MAGIC_SYSRQ
344 err = register_xenbus_watch(&sysrq_watch);
345 if (err) {
346 pr_err("Failed to set sysrq watcher\n");
347 return err;
348 }
349#endif
350
351 for (idx = 0; idx < ARRAY_SIZE(shutdown_handlers); idx++) {
352 if (!shutdown_handlers[idx].flag)
353 continue;
354 snprintf(node, FEATURE_PATH_SIZE, "feature-%s",
355 shutdown_handlers[idx].command);
356 err = xenbus_printf(XBT_NIL, "control", node, "%u", 1);
357 if (err) {
358 pr_err("%s: Error %d writing %s\n", __func__,
359 err, node);
360 return err;
361 }
362 }
363
364 return 0;
365}
366
367static int shutdown_event(struct notifier_block *notifier,
368 unsigned long event,
369 void *data)
370{
371 setup_shutdown_watcher();
372 return NOTIFY_DONE;
373}
374
375int xen_setup_shutdown_event(void)
376{
377 static struct notifier_block xenstore_notifier = {
378 .notifier_call = shutdown_event
379 };
380
381 if (!xen_domain())
382 return -ENODEV;
383 register_xenstore_notifier(&xenstore_notifier);
384 register_reboot_notifier(&xen_reboot_nb);
385
386 return 0;
387}
388EXPORT_SYMBOL_GPL(xen_setup_shutdown_event);
389
390subsys_initcall(xen_setup_shutdown_event);
1/*
2 * Handle extern requests for shutdown, reboot and sysrq
3 */
4
5#define pr_fmt(fmt) "xen:" KBUILD_MODNAME ": " fmt
6
7#include <linux/kernel.h>
8#include <linux/err.h>
9#include <linux/slab.h>
10#include <linux/reboot.h>
11#include <linux/sysrq.h>
12#include <linux/stop_machine.h>
13#include <linux/freezer.h>
14#include <linux/syscore_ops.h>
15#include <linux/export.h>
16
17#include <xen/xen.h>
18#include <xen/xenbus.h>
19#include <xen/grant_table.h>
20#include <xen/events.h>
21#include <xen/hvc-console.h>
22#include <xen/page.h>
23#include <xen/xen-ops.h>
24
25#include <asm/xen/hypercall.h>
26#include <asm/xen/hypervisor.h>
27
28enum shutdown_state {
29 SHUTDOWN_INVALID = -1,
30 SHUTDOWN_POWEROFF = 0,
31 SHUTDOWN_SUSPEND = 2,
32 /* Code 3 is SHUTDOWN_CRASH, which we don't use because the domain can only
33 report a crash, not be instructed to crash!
34 HALT is the same as POWEROFF, as far as we're concerned. The tools use
35 the distinction when we return the reason code to them. */
36 SHUTDOWN_HALT = 4,
37};
38
39/* Ignore multiple shutdown requests. */
40static enum shutdown_state shutting_down = SHUTDOWN_INVALID;
41
42struct suspend_info {
43 int cancelled;
44};
45
46static RAW_NOTIFIER_HEAD(xen_resume_notifier);
47
48void xen_resume_notifier_register(struct notifier_block *nb)
49{
50 raw_notifier_chain_register(&xen_resume_notifier, nb);
51}
52EXPORT_SYMBOL_GPL(xen_resume_notifier_register);
53
54void xen_resume_notifier_unregister(struct notifier_block *nb)
55{
56 raw_notifier_chain_unregister(&xen_resume_notifier, nb);
57}
58EXPORT_SYMBOL_GPL(xen_resume_notifier_unregister);
59
60#ifdef CONFIG_HIBERNATE_CALLBACKS
61static int xen_suspend(void *data)
62{
63 struct suspend_info *si = data;
64 int err;
65
66 BUG_ON(!irqs_disabled());
67
68 err = syscore_suspend();
69 if (err) {
70 pr_err("%s: system core suspend failed: %d\n", __func__, err);
71 return err;
72 }
73
74 gnttab_suspend();
75 xen_manage_runstate_time(-1);
76 xen_arch_pre_suspend();
77
78 si->cancelled = HYPERVISOR_suspend(xen_pv_domain()
79 ? virt_to_gfn(xen_start_info)
80 : 0);
81
82 xen_arch_post_suspend(si->cancelled);
83 xen_manage_runstate_time(si->cancelled ? 1 : 0);
84 gnttab_resume();
85
86 if (!si->cancelled) {
87 xen_irq_resume();
88 xen_timer_resume();
89 }
90
91 syscore_resume();
92
93 return 0;
94}
95
96static void do_suspend(void)
97{
98 int err;
99 struct suspend_info si;
100
101 shutting_down = SHUTDOWN_SUSPEND;
102
103 err = freeze_processes();
104 if (err) {
105 pr_err("%s: freeze processes failed %d\n", __func__, err);
106 goto out;
107 }
108
109 err = freeze_kernel_threads();
110 if (err) {
111 pr_err("%s: freeze kernel threads failed %d\n", __func__, err);
112 goto out_thaw;
113 }
114
115 err = dpm_suspend_start(PMSG_FREEZE);
116 if (err) {
117 pr_err("%s: dpm_suspend_start %d\n", __func__, err);
118 goto out_thaw;
119 }
120
121 printk(KERN_DEBUG "suspending xenstore...\n");
122 xs_suspend();
123
124 err = dpm_suspend_end(PMSG_FREEZE);
125 if (err) {
126 pr_err("dpm_suspend_end failed: %d\n", err);
127 si.cancelled = 0;
128 goto out_resume;
129 }
130
131 xen_arch_suspend();
132
133 si.cancelled = 1;
134
135 err = stop_machine(xen_suspend, &si, cpumask_of(0));
136
137 /* Resume console as early as possible. */
138 if (!si.cancelled)
139 xen_console_resume();
140
141 raw_notifier_call_chain(&xen_resume_notifier, 0, NULL);
142
143 dpm_resume_start(si.cancelled ? PMSG_THAW : PMSG_RESTORE);
144
145 if (err) {
146 pr_err("failed to start xen_suspend: %d\n", err);
147 si.cancelled = 1;
148 }
149
150 xen_arch_resume();
151
152out_resume:
153 if (!si.cancelled)
154 xs_resume();
155 else
156 xs_suspend_cancel();
157
158 dpm_resume_end(si.cancelled ? PMSG_THAW : PMSG_RESTORE);
159
160out_thaw:
161 thaw_processes();
162out:
163 shutting_down = SHUTDOWN_INVALID;
164}
165#endif /* CONFIG_HIBERNATE_CALLBACKS */
166
167struct shutdown_handler {
168#define SHUTDOWN_CMD_SIZE 11
169 const char command[SHUTDOWN_CMD_SIZE];
170 bool flag;
171 void (*cb)(void);
172};
173
174static int poweroff_nb(struct notifier_block *cb, unsigned long code, void *unused)
175{
176 switch (code) {
177 case SYS_DOWN:
178 case SYS_HALT:
179 case SYS_POWER_OFF:
180 shutting_down = SHUTDOWN_POWEROFF;
181 default:
182 break;
183 }
184 return NOTIFY_DONE;
185}
186static void do_poweroff(void)
187{
188 switch (system_state) {
189 case SYSTEM_BOOTING:
190 case SYSTEM_SCHEDULING:
191 orderly_poweroff(true);
192 break;
193 case SYSTEM_RUNNING:
194 orderly_poweroff(false);
195 break;
196 default:
197 /* Don't do it when we are halting/rebooting. */
198 pr_info("Ignoring Xen toolstack shutdown.\n");
199 break;
200 }
201}
202
203static void do_reboot(void)
204{
205 shutting_down = SHUTDOWN_POWEROFF; /* ? */
206 ctrl_alt_del();
207}
208
209static struct shutdown_handler shutdown_handlers[] = {
210 { "poweroff", true, do_poweroff },
211 { "halt", false, do_poweroff },
212 { "reboot", true, do_reboot },
213#ifdef CONFIG_HIBERNATE_CALLBACKS
214 { "suspend", true, do_suspend },
215#endif
216};
217
218static void shutdown_handler(struct xenbus_watch *watch,
219 const char *path, const char *token)
220{
221 char *str;
222 struct xenbus_transaction xbt;
223 int err;
224 int idx;
225
226 if (shutting_down != SHUTDOWN_INVALID)
227 return;
228
229 again:
230 err = xenbus_transaction_start(&xbt);
231 if (err)
232 return;
233
234 str = (char *)xenbus_read(xbt, "control", "shutdown", NULL);
235 /* Ignore read errors and empty reads. */
236 if (XENBUS_IS_ERR_READ(str)) {
237 xenbus_transaction_end(xbt, 1);
238 return;
239 }
240
241 for (idx = 0; idx < ARRAY_SIZE(shutdown_handlers); idx++) {
242 if (strcmp(str, shutdown_handlers[idx].command) == 0)
243 break;
244 }
245
246 /* Only acknowledge commands which we are prepared to handle. */
247 if (idx < ARRAY_SIZE(shutdown_handlers))
248 xenbus_write(xbt, "control", "shutdown", "");
249
250 err = xenbus_transaction_end(xbt, 0);
251 if (err == -EAGAIN) {
252 kfree(str);
253 goto again;
254 }
255
256 if (idx < ARRAY_SIZE(shutdown_handlers)) {
257 shutdown_handlers[idx].cb();
258 } else {
259 pr_info("Ignoring shutdown request: %s\n", str);
260 shutting_down = SHUTDOWN_INVALID;
261 }
262
263 kfree(str);
264}
265
266#ifdef CONFIG_MAGIC_SYSRQ
267static void sysrq_handler(struct xenbus_watch *watch, const char *path,
268 const char *token)
269{
270 char sysrq_key = '\0';
271 struct xenbus_transaction xbt;
272 int err;
273
274 again:
275 err = xenbus_transaction_start(&xbt);
276 if (err)
277 return;
278 err = xenbus_scanf(xbt, "control", "sysrq", "%c", &sysrq_key);
279 if (err < 0) {
280 /*
281 * The Xenstore watch fires directly after registering it and
282 * after a suspend/resume cycle. So ENOENT is no error but
283 * might happen in those cases.
284 */
285 if (err != -ENOENT)
286 pr_err("Error %d reading sysrq code in control/sysrq\n",
287 err);
288 xenbus_transaction_end(xbt, 1);
289 return;
290 }
291
292 if (sysrq_key != '\0')
293 xenbus_printf(xbt, "control", "sysrq", "%c", '\0');
294
295 err = xenbus_transaction_end(xbt, 0);
296 if (err == -EAGAIN)
297 goto again;
298
299 if (sysrq_key != '\0')
300 handle_sysrq(sysrq_key);
301}
302
303static struct xenbus_watch sysrq_watch = {
304 .node = "control/sysrq",
305 .callback = sysrq_handler
306};
307#endif
308
309static struct xenbus_watch shutdown_watch = {
310 .node = "control/shutdown",
311 .callback = shutdown_handler
312};
313
314static struct notifier_block xen_reboot_nb = {
315 .notifier_call = poweroff_nb,
316};
317
318static int setup_shutdown_watcher(void)
319{
320 int err;
321 int idx;
322#define FEATURE_PATH_SIZE (SHUTDOWN_CMD_SIZE + sizeof("feature-"))
323 char node[FEATURE_PATH_SIZE];
324
325 err = register_xenbus_watch(&shutdown_watch);
326 if (err) {
327 pr_err("Failed to set shutdown watcher\n");
328 return err;
329 }
330
331
332#ifdef CONFIG_MAGIC_SYSRQ
333 err = register_xenbus_watch(&sysrq_watch);
334 if (err) {
335 pr_err("Failed to set sysrq watcher\n");
336 return err;
337 }
338#endif
339
340 for (idx = 0; idx < ARRAY_SIZE(shutdown_handlers); idx++) {
341 if (!shutdown_handlers[idx].flag)
342 continue;
343 snprintf(node, FEATURE_PATH_SIZE, "feature-%s",
344 shutdown_handlers[idx].command);
345 xenbus_printf(XBT_NIL, "control", node, "%u", 1);
346 }
347
348 return 0;
349}
350
351static int shutdown_event(struct notifier_block *notifier,
352 unsigned long event,
353 void *data)
354{
355 setup_shutdown_watcher();
356 return NOTIFY_DONE;
357}
358
359int xen_setup_shutdown_event(void)
360{
361 static struct notifier_block xenstore_notifier = {
362 .notifier_call = shutdown_event
363 };
364
365 if (!xen_domain())
366 return -ENODEV;
367 register_xenstore_notifier(&xenstore_notifier);
368 register_reboot_notifier(&xen_reboot_nb);
369
370 return 0;
371}
372EXPORT_SYMBOL_GPL(xen_setup_shutdown_event);
373
374subsys_initcall(xen_setup_shutdown_event);